78 Commits

Author	SHA1	Message	Date
Pierre Jaury	713318f097	Clean imports and remove calls to the utils module	2016-08-29 19:35:09 +02:00
Pierre Jaury	ee9a416696	Implement the decorator-based access control for all views	2016-08-29 19:24:39 +02:00
Pierre Jaury	4e4f2b8037	First shot at improving access control, related to #42 ... A couple of things are important to note for this commit: - it only implements the new access control for alias and admin management - the access control code is located in access.py The idea behind simpler access control is auditability. There have been a couple of bugs related to functions not checking permissions properly. If checking permissions is as simple as decorating a function, exporting the permission scheme for an audit should be simple. Also, this still does not address the information leakage related to 404 errors when an object does not exist, independently of permissions the user has over the domain.	2016-08-28 15:23:57 +02:00
Pierre Jaury	3ea3bc1d8e	Enforce permission checks for admin management	2016-08-27 15:05:30 +02:00
Pierre Jaury	e3197f9156	Have the admin interface listen on localhost	2016-08-21 15:01:07 +02:00
Pierre Jaury	8601d5b8db	Fix #49 when deleting a global admin	2016-08-20 12:46:29 +02:00
Pierre Jaury	0d3c75aa89	Fix a migration issue with wildcard aliases	2016-08-20 12:23:55 +02:00
Pierre Jaury	84769cab3e	Switch to form-based confirmations, fixes #20	2016-08-19 10:49:05 +02:00
Pierre Jaury	5a69ada041	Add an action confirmation form, related to #20	2016-08-19 10:36:13 +02:00
Pierre Jaury	58337d7dd6	Set a proper default for spam thresholds	2016-08-18 20:42:55 +02:00
Pierre Jaury	1ce0bf2ef7	Update the user settings view with a slider	2016-08-18 20:42:35 +02:00
XYunknown	6d4243ec66	Adding SQL Like format for aliases	2016-08-15 21:01:53 +02:00
Pierre Jaury	b3d7b657ab	Remove deprecated flask.ext imports	2016-08-13 20:51:54 +02:00
Pierre Jaury	9640d59aca	Fix #25, serve static resources locally	2016-08-13 20:39:36 +02:00
Pierre Jaury	689c022a4a	Get back to a single forward destination	2016-08-13 20:01:40 +02:00
Pierre Jaury	678a5c8065	Fix #22, use ellipsis for overflowing text	2016-08-11 16:56:50 +02:00
Pierre Jaury	c07211677c	Fix the default value for comma separated lists	2016-08-11 16:32:50 +02:00
Pierre Jaury	163494cb78	Use readonly attribute instead of disabled	2016-08-11 16:06:52 +02:00
Pierre Jaury	6af7a07e77	Avoid having an empty entry in destionation fields	2016-08-11 15:41:12 +02:00
Pierre Jaury	5581f1b0d9	Related to #19, fix the alias creation page	2016-08-11 14:27:01 +02:00
Pierre Jaury	dcaf3e3473	Fix #30, use cascade deletion on domains	2016-08-11 14:13:56 +02:00
Pierre Jaury	49a1281976	Display the alias list properly	2016-08-11 13:52:03 +02:00
Pierre Jaury	5f36e6f4f2	Related to #19, implement domain specific field and database type	2016-08-11 13:33:04 +02:00
Pierre Jaury	aace1c2d78	Get back to serving CDN assets, related to #25	2016-06-26 13:48:56 +02:00
Pierre Jaury	1673631e69	Fix the columns in the fetch list	2016-06-26 12:41:25 +02:00
Pierre Jaury	f8a220e72a	Serve local assets only	2016-06-26 11:18:14 +02:00
Pierre Jaury	21bec865b3	Fix permission management when editing/deleting fetches	2016-06-25 19:48:10 +02:00
Pierre Jaury	58ec3597ab	Fix te DKIM DNS example	2016-06-25 19:08:21 +02:00
Pierre Jaury	6a3af51785	Add a confirmation modal when regenerating keys	2016-06-25 16:10:30 +02:00
Pierre Jaury	66a1b50cc9	Sign outgoing emails using DKIM	2016-06-25 16:06:52 +02:00
Pierre Jaury	24680957f7	Handle DKIM key generation and storage	2016-06-25 15:50:05 +02:00
Pierre Jaury	2fa8b879db	Display domain SPF and DMARC example entries, fixes #15	2016-06-25 14:51:02 +02:00
Pierre Jaury	5d7b3b981d	Initialize the migration system	2016-06-25 12:57:47 +02:00
Pierre Jaury	215ba74275	Remove non-minimized static assets	2016-06-19 15:38:48 +02:00
Pierre Jaury	4853e54f0b	Replace tagsinput with select2	2016-06-19 15:36:15 +02:00
Pierre Jaury	0668f9abc9	Fix the user create form	2016-06-15 21:08:03 +02:00
Pierre Jaury	5c1441486b	Fix permissions for non-admin users	2016-06-15 21:07:47 +02:00
Pierre Jaury	7f7ff4d722	Fix #9, do not reuse the flask_login object for updates, query instead	2016-05-30 22:03:58 +02:00
Pierre Jaury	e22f4b29b6	Fix a bug when updating the forward address	2016-05-29 17:06:06 +02:00
Pierre Jaury	82ec86afd8	Do not always add objects to the session before committing	2016-05-06 23:27:11 +02:00
Pierre Jaury	9efc798246	Store the state of reply and forward settings being enabled	2016-05-04 16:12:56 +02:00
Pierre Jaury	493fcf3a58	Use populate_obj to update objects	2016-05-01 21:12:08 +02:00
Pierre Jaury	d3b13c2412	Use SQLAlchemy Session.get instead of filter_by	2016-05-01 20:09:47 +02:00
Pierre Jaury	3eca6864c3	Rename the generic 'address' to 'email'	2016-05-01 20:04:40 +02:00
Pierre Jaury	5343a397ff	Fix the link to the fetchmail list	2016-04-30 13:17:13 +02:00
Pierre Jaury	f832b74c85	Redirect to the fetch list after creation	2016-04-28 20:09:44 +02:00
Pierre Jaury	30ecbf81cd	First fetchmail implementation	2016-04-28 20:07:38 +02:00
Pierre Jaury	c56a51f7b7	Fix references to the deprecrated admin_of field	2016-04-24 19:42:02 +02:00
Pierre Jaury	340edc629e	Implement admin and manager management	2016-04-24 19:17:40 +02:00
Pierre Jaury	e2faf8e1be	Fix the logo link	2016-04-24 18:06:04 +02:00